Unscored CVE-2013-3649 EUVD-2013-3582GHSA-qhmv-5p7p-c9vj

Cross-site scripting (XSS) vulnerability in KENT-WEB CLIP-MAIL before 3.4, when Internet Explorer 7 or earlier is used, allows remote attac…

Published Jun 28, 2013 · Updated Sep 16, 2024 · Assigned by jpcert

Description

Cross-site scripting (XSS) vulnerability in KENT-WEB CLIP-MAIL before 3.4, when Internet Explorer 7 or earlier is used, allows remote attackers to inject arbitrary web script or HTML via an unspecified form field.

References

http://www.kent-web.com/mail/clipmail.html
JVNDB-2013-000067 third-party-advisory
JVN#85804149 third-party-advisory